ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 381:

  When building a data center, site location and construction factors that increase the level of vulnerability to physical threats include

  A. hardened building construction with consideration of seismic factors.
  B. adequate distance from and lack of access to adjacent buildings.
  C. curved roads approaching the data center.
  D. proximity to high crime areas of the city.
  D. proximity to high crime areas of the city.

• Question 382:

  An international organization has decided to use a Software as a Service (SaaS) solution to support its business operations. Which of the following compliance standards should the organization use to assess the international code security and data privacy of the solution?

  A. Health Insurance Portability and Accountability Act (HIPAA)
  B. Service Organization Control (SOC) 2
  C. Payment Card Industry (PCI)
  D. Information Assurance Technical Framework (IATF)
  B. Service Organization Control (SOC) 2

• Question 383:

  Why would a security architect specify that a default route pointing to a sinkhole be injected into internal networks?

  A. To have firewalls route all network traffic
  B. To detect the traffic destined to non-existent network destinations
  C. To exercise authority over the network department
  D. To re-inject the route into external networks
  B. To detect the traffic destined to non-existent network destinations

• Question 384:

  An advantage of link encryption in a communications network is that it

  A. makes key management and distribution easier.
  B. protects data from start to finish through the entire network.
  C. improves the efficiency of the transmission.
  D. encrypts all information, including headers and routing information.
  D. encrypts all information, including headers and routing information.

• Question 385:

  What Is the FIRST step for a digital investigator to perform when using best practices to collect digital evidence from a potential crime scene?

  A. Consult the lead investigate to team the details of the case and required evidence.
  B. Assure that grounding procedures have been followed to reduce the loss of digital data due to static electricity discharge.
  C. Update the Basic Input Output System (BIOS) and Operating System (OS) of any tools used to assure evidence admissibility.
  D. Confirm that the appropriate warrants were issued to the subject of the investigation to eliminate illegal search claims.
  D. Confirm that the appropriate warrants were issued to the subject of the investigation to eliminate illegal search claims.

• Question 386:

  What is the MOST efficient way to verify the integrity of database backups?

  A. Test restores on a regular basis.
  B. Restore every file in the system to check its health.
  C. Use checksum as part of the backup operation to make sure that no corruption has occurred.
  D. Run DBCC CHECKDB on a regular basis to check the logical and physical integrity of the database objects.
  C. Use checksum as part of the backup operation to make sure that no corruption has occurred.

• Question 387:

  DRAG DROP

  Order the below steps to create an effective vulnerability management process.

  Select and Place:

  

  

• Question 388:

  Which of the following authorization standards is built to handle Application programming Interface (API) access for federated Identity management (FIM)?

  A. Remote Authentication Dial-In User Service (RADIUS)
  B. Terminal Access Controller Access Control System Plus (TACACS+)
  C. Open Authentication (OAuth)
  D. Security Assertion Markup Language (SAML)
  C. Open Authentication (OAuth)

• Question 389:

  Government data classifications include which of the following:(Choose three)

  A. Open
  B. Unclassified
  C. Confidential
  D. Private
  E. Secret
  F. Top Secret
  B. Unclassified
  C. Confidential
  F. Top Secret

• Question 390:

  Which of the following are Systems Engineering Life Cycle (SELC) Technical Processes?

  A. Concept, Development, Production, Utilization, Support, Retirement
  B. Stakeholder Requirements Definition, Architectural Design, Implementation, Verification, Operation
  C. Acquisition, Measurement, Configuration Management, Production, Operation, Support
  D. Concept, Requirements, Design, Implementation, Production, Maintenance, Support, Disposal
  B. Stakeholder Requirements Definition, Architectural Design, Implementation, Verification, Operation